<!DOCTYPE html>
<html>
  <body><a href="javascript:hello('{{xss (input, 'js', 'uri', 'html')}}')"></a>
  </body>
</html>